Legal

Privacy Policy

Last updated: January 21, 2025

At BoxStream, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Please read this policy carefully to understand our views and practices regarding your personal data.

1. Information We Collect

Account Information

When you create an account, we collect:

  • Email address
  • Display name
  • Profile picture provided by your Google account

Usage Data

We automatically collect:

  • Watch history and progress
  • Favorites and watchlist items
  • Installed addons
  • Search queries
  • Device and browser information
  • IP address and approximate location

Third-Party OAuth

If you sign in using Google, we receive basic profile information as permitted by your privacy settings on that platform.

2. How We Use Your Information

We use the collected information to:

  • Provide and maintain the Service
  • Personalize your experience and recommendations
  • Sync your data across devices
  • Communicate with you about updates and features
  • Analyze usage patterns to improve the Service
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

3. Information Sharing

We do NOT sell your personal information. We may share data with:

Service Providers

Third-party services that help us operate the platform (hosting, analytics, etc.). These providers are bound by confidentiality agreements.

Legal Requirements

We may disclose information if required by law, court order, or government request.

Third-Party Addons

Warning: When you install third-party addons, those addons may collect their own data according to their own privacy policies. BoxStream has no control over data collected by third-party addons.

4. Data Security

We implement industry-standard security measures including:

  • Encryption of data in transit (HTTPS/TLS)
  • Encrypted password storage (bcrypt hashing)
  • Secure session management
  • Regular security audits
  • Access controls and authentication

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Cookies and Tracking

We use cookies and similar technologies for:

  • Essential Cookies: Required for authentication and core functionality
  • Preference Cookies: Remember your settings and preferences
  • Analytics Cookies: Help us understand how users interact with the Service

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using certain features.

6. Your Rights

Depending on your location, you may have the right to:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data
  • Portability: Request your data in a portable format
  • Objection: Object to certain processing of your data
  • Restriction: Request restriction of processing

To exercise these rights, please contact us using the information below.

7. Data Retention

We retain your personal data for as long as:

  • Your account is active
  • Needed to provide you services
  • Required by law or for legitimate business purposes

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

8. Children's Privacy

BoxStream is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@boxstream.app

We will respond to your inquiry within 30 days.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting a notice on the Service or sending you an email.

Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.